fix(deps): update rust dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anyhow	build-dependencies	patch	1.0.100 → 1.0.102
axum-tracing-opentelemetry (source)	dependencies	minor	0.32.1 → 0.33.0
config	dependencies	patch	0.15.19 → 0.15.22
futures (source)	dev-dependencies	patch	0.3.31 → 0.3.32
futures (source)	dependencies	patch	0.3.31 → 0.3.32
regex	dev-dependencies	patch	1.12.2 → 1.12.3
time (source)	dependencies	patch	0.3.44 → 0.3.47
tokio (source)	dependencies	minor	1.49.0 → 1.50.0
tower	dev-dependencies	patch	0.5.2 → 0.5.3
tower	dependencies	patch	0.5.2 → 0.5.3
tracing-subscriber (source)	dependencies	patch	0.3.22 → 0.3.23

---

Release Notes

dtolnay/anyhow (anyhow)

v1.0.102

Compare Source

• Remove backtrace dependency (#​438, #​439, #​440, #​441, #​442)

v1.0.101

Compare Source

• Add #[inline] to anyhow::Ok helper (#​437, thanks @​Ibitier)

davidB/tracing-opentelemetry-instrumentation-sdk (axum-tracing-opentelemetry)

v0.33.1

Compare Source

v0.33.0

Compare Source

v0.32.3

Compare Source

rust-cli/config-rs (config)

v0.15.22

Compare Source

Documentation

• Polish examples

Internal

• Update winnow

v0.15.21

Compare Source

Compatibility

• Bump MSRV to 1.85

v0.15.20

Compare Source

Fixes

• Serialize the full u64 range

Internal

• (toml) Update to 1.0

rust-lang/futures-rs (futures)

v0.3.32

Compare Source

• Bump MSRV of utility crates to 1.71. (#​2989)
• Soft-deprecate ready! macro in favor of std::task::ready! added in Rust 1.64 (#​2925)
• Soft-deprecate pin_mut! macro in favor of std::pin::pin! added in Rust 1.68 (#​2929)
• Add FuturesOrdered::clear (#​2927)
• Add mpsc::*Receiver::recv (#​2947)
• Add mpsc::*Receiver::try_recv and deprecate mpsc::*Receiver::::try_next (#​2944)
• Implement FusedStream for sink::With (#​2948)
• Add no_std support for shared (#​2868)
• Make Mutex::new() const (#​2956)
• Add #[clippy::has_significant_drop] to guards (#​2967)
• Remove dependency to pin-utils (#​2929)
• Remove dependency on num_cpus (#​2946)
• Performance improvements (#​2983)
• Documentation improvements (#​2925, #​2926, #​2940, #​2971)

rust-lang/regex (regex)

v1.12.3

Compare Source

===================
This release excludes some unnecessary things from the archive published to
crates.io. Specifically, fuzzing data and various shell scripts are now
excluded. If you run into problems, please file an issue.

Improvements:

• #​1319:
  Switch from a Cargo exclude list to an include list, and exclude some
  unnecessary stuff.

time-rs/time (time)

v0.3.47

Compare Source

Security

• The possibility of a stack exhaustion denial of service attack when parsing RFC 2822 has been
  eliminated. Previously, it was possible to craft input that would cause unbounded recursion. Now,
  the depth of the recursion is tracked, causing an error to be returned if it exceeds a reasonable
  limit.

  This attack vector requires parsing user-provided input, with any type, using the RFC 2822 format.

Compatibility

• Attempting to format a value with a well-known format (i.e. RFC 3339, RFC 2822, or ISO 8601) will
  error at compile time if the type being formatted does not provide sufficient information. This
  would previously fail at runtime. Similarly, attempting to format a value with ISO 8601 that is
  only configured for parsing (i.e. Iso8601::PARSING) will error at compile time.

Added

• Builder methods for format description modifiers, eliminating the need for verbose initialization
  when done manually.
• date!(2026-W01-2) is now supported. Previously, a space was required between W and 01.
• [end] now has a trailing_input modifier which can either be prohibit (the default) or
  discard. When it is discard, all remaining input is ignored. Note that if there are components
  after [end], they will still attempt to be parsed, likely resulting in an error.

Changed

• More performance gains when parsing.

Fixed

• If manually formatting a value, the number of bytes written was one short for some components.
  This has been fixed such that the number of bytes written is always correct.
• The possibility of integer overflow when parsing an owned format description has been effectively
  eliminated. This would previously wrap when overflow checks were disabled. Instead of storing the
  depth as u8, it is stored as u32. This would require multiple gigabytes of nested input to
  overflow, at which point we've got other problems and trivial mitigations are available by
  downstream users.

v0.3.46

Compare Source

Added

• All possible panics are now documented for the relevant methods.

• The need to use #[serde(default)] when using custom serde formats is documented. This applies
  only when deserializing an Option<T>.

• Duration::nanoseconds_i128 has been made public, mirroring
  std::time::Duration::from_nanos_u128.

• Various methods for truncating components have been added, avoiding the need to call the fallible
  replace methods multiple times.

  For PrimitiveDateTime, UtcDateTime, and OffsetDateTime:

  • truncate_to_day

  For Time, PrimitiveDateTime, UtcDateTime, and OffsetDateTime:

  • truncate_to_hour
  • truncate_to_minute
  • truncate_to_second
  • truncate_to_millisecond
  • truncate_to_microsecond

Changed

• The minimum supported Rust version is now 1.88.0.
• Significant performance gains in numerous locations. No public APIs were changed or removed as
  part of this.
• The size of error::ComponentRange, along with types that contain it, has been significantly
  reduced.

Fixed

• The PartialOrd and Ord implementations of UtcOffset now return the expected result.

v0.3.45

Compare Source

Added

• time::format_description::StaticFormatDescription type alias for &'static [BorrowedFormatItem<'static>]. This is the type returned by the
  time::macros::format_description! macro.

Changed

• The minimum supported Rust version is now 1.83.0.
• All floating point methods on Duration are now const fn.
• All setters on Parsed are now const fn.
• The serde dependency has been replaced with serde_core, This reduces compile times by not
  including unused parts of serde.
• Date::from_julian_day uses a new algorithm, resulting in an approximately 16% performance
  improvement. This method is used internally by numerous other methods.
• util::is_leap_year uses a new algorithm, resulting in an approximately 8% performance
  improvement.

tokio-rs/tokio (tokio)

v1.50.0: Tokio v1.50.0

Compare Source

1.50.0 (Mar 3rd, 2026)

Added

• net: add TcpStream::set_zero_linger (#​7837)
• rt: add is_rt_shutdown_err (#​7771)

Changed

• io: add optimizer hint that memchr returns in-bounds pointer (#​7792)
• io: implement vectored writes for write_buf (#​7871)
• runtime: panic when event_interval is set to 0 (#​7838)
• runtime: shorten default thread name to fit in Linux limit (#​7880)
• signal: remember the result of SetConsoleCtrlHandler (#​7833)
• signal: specialize windows Registry (#​7885)

Fixed

• io: always cleanup AsyncFd registration list on deregister (#​7773)
• macros: remove (most) local use declarations in tokio::select! (#​7929)
• net: fix GET_BUF_SIZE constant for target_os = "android" (#​7889)
• runtime: avoid redundant unpark in current_thread scheduler (#​7834)
• runtime: don't park in current_thread if before_park defers waker (#​7835)
• io: fix write readiness on ESP32 on short writes (#​7872)
• runtime: wake deferred tasks before entering block_in_place (#​7879)
• sync: drop rx waker when oneshot receiver is dropped (#​7886)
• runtime: fix double increment of num_idle_threads on shutdown (#​7910, #​7918, #​7922)

Unstable

• fs: check for io-uring opcode support (#​7815)
• runtime: avoid lock acquisition after uring init (#​7850)

Documented

• docs: update outdated unstable features section (#​7839)
• io: clarify the behavior of AsyncWriteExt::shutdown() (#​7908)
• io: explain how to flush stdout/stderr (#​7904)
• io: fix incorrect and confusing AsyncWrite documentation (#​7875)
• rt: clarify the documentation of Runtime::spawn (#​7803)
• rt: fix missing quotation in docs (#​7925)
• runtime: correct the default thread name in docs (#​7896)
• runtime: fix event_interval doc (#​7932)
• sync: clarify RwLock fairness documentation (#​7919)
• sync: clarify that recv returns None once closed and no more messages (#​7920)
• task: clarify when to use spawn_blocking vs dedicated threads (#​7923)
• task: doc that task drops before JoinHandle completion (#​7825)
• signal: guarantee that listeners never return None (#​7869)
• task: fix task module feature flags in docs (#​7891)
• task: fix two typos (#​7913)
• task: improve the docs of Builder::spawn_local (#​7828)
• time: add docs about auto-advance and when to use sleep (#​7858)
• util: fix typo in docs (#​7926)

tower-rs/tower (tower)

v0.5.3: tower 0.5.3

Compare Source

Added

• builder: Add ServiceBuilder::boxed_clone_sync() helper (#​804)

Fixed

• retry: Check that supplied jitter is not NaN (#​843)

tokio-rs/tracing (tracing-subscriber)

v0.3.23: tracing-subscriber 0.3.23

Compare Source

Fixed

• Allow ansi sanitization to be disabled (#​3484)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.17%. Comparing base (0105831) to head (2b22ee6).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #202   +/-   ##
=======================================
  Coverage   90.17%   90.17%           
=======================================
  Files           9        9           
  Lines         529      529           
=======================================
  Hits          477      477           
  Misses         52       52           

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0105831...2b22ee6. Read the comment docs.